CVE-2020-6950

Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371

Published Jun 2, 2021 CVSS 3.1 · 6.5 Medium EPSS 10.1% KEV · Not listed
Description
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-rpq8-mmwh-q9hm Directory traversal in Eclipse Mojarra
History

No history.